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PROBLEM TO BE SOLVED: To make communication between a financial server and a user 
who is related to a web browser safe by including some security functions in the 
web browser and the web server. 

SOLUTION: A financial server 102 includes an audit trail 122 which traces each 
transaction. An HTML form 124 performs transmission to a web browser 216 in a 
cipher format or without performing special formattings. The browser 216 returns a 
message 143, including form data to the server 102 in an enciphered format, in a 
format which includes the digital signature of a user and a time stamp and in a 
format which includes the digital signature of the user and a time stamp and is 
enciphered or without performing special formattings. The browser 216 is provided 
with an encipher procedure 220, a time stamp procedure 228, a digital signature 
procedure 230, and a random key generating procedure 232. 
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ABSTRACT : 

PROBLEM TO BE SOLVED: To achieve flexible high-grade security in the case of 
accessing a web resource on a by a cliant system. 

SOLUTION: In the client system, a memory 51 is provided with an operating system 52 
and a window manager 53. A token is generated by a client browser 100 inside the 
memory 51 of a computer and transferred to the security server together with a 
service request. Besides, these service request and token are supplied to a server 
application, the verification of the token is requested, the received token is 
transferred to the security server and tokens from the client browser 100 and the 
server application are compared. In the case of coincidence in this comparison, a 
coincidence notice is generated but when these tokens are not coincident, a non- 
coincidence notice is generated and transferred to the server application. When the 
coincidence notice is received, the requested service is provided. 
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